Your spouse is probably reading your messages. Here’s how they’re doing it.

Not might be. Probably are. And in most cases, they don’t need to have done anything technically sophisticated to get there.

The access that was never revoked

Shared iCloud. Shared Google account. Location apps installed during a period when it felt normal and never removed. A browser that saved a password on a device you both used at some point.

If your photos sync to a shared Apple ID, your partner sees them. If your iMessages are tied to that ID, they read them. If Life360 is still running in the background of a phone you haven’t touched in months, your location has been updating on a schedule you didn’t know about. (See: is your phone being monitored.)

This is the most common access vector in contested divorces. Not spyware. Forgotten permissions. (See: assume your devices are already compromised.)

Password knowledge accumulated over years

Most people’s passwords follow a pattern. Significant dates, names, numbers with personal meaning. A spouse of several years has watched those passwords typed hundreds of times. They may not have consciously memorised anything. The pattern is still there.

It matters most for accounts that were never shared but follow the same formula as the ones that were. Email. Banking. Correspondence with a lawyer. If the formula is known, the account is accessible.

Consumer spyware marketed as parental controls

mSpy, FlexiSpy, Hoverwatch. Sold openly, 30 to 70 euros a month, about five minutes of physical access to install. After that they run invisibly. They don’t appear in the app list. They often survive a basic reset.

What they log: SMS, calls, WhatsApp, location in real time, browser history, photos, keystrokes on some versions. The dashboard is accessible from any browser.

On iOS without a jailbreak, they work through iCloud credentials. No device access required. Just your Apple ID and password, which is sometimes all it takes.

Email forwarding rules

Two minutes to configure. Invisible in normal use. Every email you send or receive goes to a second address you don’t know exists.

In Gmail: Settings > See all settings > Forwarding and POP/IMAP. In Outlook: Settings > View all Outlook settings > Mail > Forwarding. If there’s a rule you didn’t create, it has been running since the day it was added. Every message since then.

This shows up in legal proceedings often enough that lawyers now tell clients to check it on day one.

What to do before you change anything

Assess before you act. Changing passwords before understanding what access exists may alert someone who was watching quietly. Deleting messages before knowing what has been forwarded or backed up may destroy evidence you need, or create a legal problem that wasn’t there before.

Check active sessions on every major account. Google, Apple, WhatsApp, iMessage all show which devices are currently logged in. Any device you don’t recognise is live access. Check email forwarding rules. Check location sharing on Find My and Google Maps. Look through app permissions for anything with simultaneous location, microphone, and camera access.

Do that audit from a device your spouse has never had in their hands.

Frequently asked questions

Can a spouse legally install spyware on your phone?

In most jurisdictions, no. Installing monitoring software without the owner’s consent is illegal regardless of the marital relationship. The legality of other access methods — shared accounts and known passwords — is more complicated and varies by jurisdiction. Document what you find before you act on it, and consult a lawyer.

How do I know if my phone has spyware on it?

Unusual battery drain, data usage that doesn’t match your behaviour, the device warm when it should be idle. None of these confirm it individually. The reliable fix is a full factory reset, but don’t do that before getting legal advice in an active dispute.

There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.